Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: 8dlAIwj5C1eDjwjAW9bcC92Na6pD3jAq2hO8LiNu1xg=
Subject key identifier: 45:50:9D:2E:2E:13:67:87:8B:E5:3A:5D:E9:E8:C9:CB:E4:E9:F3:7A
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 0198D5F141A3F9D7BCF686FF78B0FD5062D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:14 +0000
Manifest this update: Sat 23 Aug 2025 08:00:14 +0000
Manifest next update: Sun 24 Aug 2025 08:00:14 +0000
Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: M5XtqUvg5zDnylfatIlAgU/hQFa5pPlmVZHgsLVruUk=)
2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:41:a3:f9:d7:bc:f6:86:ff:78:b0:fd:50:62:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Aug 23 08:00:14 2025 GMT
Not After : Aug 24 08:00:14 2025 GMT
Subject: CN=45509d2e2e1367878be53a5de9e8c9cbe4e9f37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:21:de:ab:23:51:74:cf:8f:5e:17:69:5b:
92:ce:6f:61:5e:8e:c9:06:5d:f6:41:ab:7e:89:ba:
00:0c:3a:04:c0:f7:bb:70:2b:3e:be:5e:be:71:cc:
46:fc:10:aa:b8:60:80:ae:34:2b:2e:9f:be:61:df:
ff:dd:b2:ac:d3:7f:c0:b4:a2:33:34:f4:88:38:c8:
0a:d3:d5:89:48:d9:eb:42:bd:de:d7:a7:56:27:af:
18:4e:67:2d:03:18:5a:45:97:18:3a:27:4d:1d:aa:
18:ec:5b:4c:16:5f:f0:22:5e:2c:c7:5a:a6:89:2c:
c4:c7:05:7a:6a:2e:e9:9f:22:63:db:70:8c:96:dc:
a7:f8:28:f2:06:d8:8f:e0:fa:8f:ca:1d:c8:1a:e0:
e7:30:05:1f:f5:10:20:b3:54:39:78:86:5a:cb:58:
2c:a7:08:62:ae:97:f1:a0:46:4a:53:d9:ee:c7:2f:
5e:f6:b0:4d:ef:bb:83:ca:da:9a:f8:f5:d4:42:0b:
69:6c:fa:af:0f:03:bd:fe:a5:fa:4f:a2:02:a4:ee:
5a:2b:fc:56:84:32:12:96:3c:13:fb:8a:5c:65:53:
f4:3f:ed:ee:22:24:c7:b9:98:75:c2:37:ff:ca:d8:
69:56:99:42:e8:9c:01:b7:35:c6:c8:30:7a:cc:bf:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:9D:2E:2E:13:67:87:8B:E5:3A:5D:E9:E8:C9:CB:E4:E9:F3:7A
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:91:ac:1e:f9:3d:88:a1:37:21:cb:33:34:0a:6c:37:a6:d2:
b8:b1:aa:99:a6:4c:fa:23:bf:da:62:92:30:20:b8:70:b4:3d:
66:91:5a:de:8a:49:a0:d2:fe:9e:af:7f:22:6e:f9:03:95:fd:
4a:b6:12:b2:fc:d8:34:2a:71:35:26:94:87:6c:6a:36:f7:45:
d5:fa:a2:2b:dc:51:b6:cc:0d:b4:a1:53:7b:75:7b:bb:07:27:
ec:d4:73:61:84:fe:7a:6b:4f:37:03:e9:21:65:07:61:23:c2:
79:68:76:95:5d:ef:be:97:61:1c:c5:c5:d7:3f:b9:66:37:6f:
8b:46:d5:eb:9f:8a:95:04:ff:23:af:05:b0:3b:c9:e5:4f:9a:
78:c7:5d:52:af:5b:b4:76:db:1c:93:9c:b9:80:e8:37:08:3f:
60:7e:57:bf:f4:3a:25:92:c0:7a:22:5e:c6:28:cf:2b:8a:a5:
34:2c:48:7a:a7:cc:2f:c9:52:0b:6c:94:2f:8d:64:c3:9d:d5:
83:35:65:9d:6f:f0:01:5a:63:b9:1e:eb:0e:1a:db:d1:e7:ab:
1e:77:6c:8b:8f:9f:87:6a:8f:84:11:26:7c:9c:15:ba:a2:7a:
4b:a7:37:bc:39:c2:4c:97:26:a0:a1:c2:02:52:dc:8e:11:7d:
62:7f:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:55 2025 by rpki-client